Guys,
IPSec will work with PAT, with some caveats. On the device doing the
NAT/PAT, you need a static NAT entry to send IKE and IPSec to the designated
inside device. Like this:
ip nat inside source list 100 interface Ethernet0/0 overload
(Standard PAT statement)
ip nat inside source static
[mailto:[EMAIL PROTECTED]]
Sent: Monday, November 25, 2002 4:03 PM
To: [EMAIL PROTECTED]
Subject: RE: PIX Client & WIN2000 Internet sharing [7:58062]
Guys,
IPSec will work with PAT, with some caveats. On the device doing
the NAT/PAT, you need a static NAT entry to send IKE and IPSec to
extended translations like the
IOS does. Don't have a PIX here to try it on.
Chuck Church
CCIE #8776, MCNE, MCSE
- Original Message -
From: "Elijah Savage III"
To: "Chuck Church" ;
Sent: Monday, November 25, 2002 4:32 PM
Subject: RE: PIX Client & WIN200
3 matches
Mail list logo
